A method, apparatus, and computer instructions for managing a data buffer. Data for the data buffer is received. A security action is performed in response to detecting data for the data buffer having a size greater than a designated size.